# Exploit Library: Full Reference for AI Assistants > Complete listing of all 24 free resources on exploit development and binary exploitation, grouped by topic, plus About facts. Links verified 2026-10-14. Canonical site: https://exploit.lowlevellibrary.com/ ## Entries by topic ### 0day - **Google Project Zero blog** - Provider: Google Project Zero - URL: https://googleprojectzero.blogspot.com/ - Summary: In-depth vulnerability research writeups from Google's Project Zero team. - Topics: research, writeups, 0day - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/project-zero/ ### arm - **Writing ARM Shellcode** - Provider: Azeria Labs - URL: https://azeria-labs.com/writing-arm-shellcode/ - Summary: Practical guide to writing and debugging ARM shellcode. - Topics: arm, shellcode, tutorial - Level: Intermediate - Format: Tutorial - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/azeria-shellcode/ ### automation - **pwntools documentation** - Provider: Gallopsled - URL: https://docs.pwntools.com/en/stable/ - Summary: Docs for pwntools, the standard Python toolkit for writing exploit scripts and CTF solvers. - Topics: tools, python, automation - Level: Intermediate - Format: Library docs - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwntools-docs/ ### beginner - **pwn.college** - Provider: Arizona State University / pwn.college - URL: https://pwn.college/ - Summary: Structured free dojo covering binary exploitation from first principles with graded modules. - Topics: course, practice, linux, beginner - Level: Beginner - Format: Interactive dojo + videos - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwn-college/ - **Exploit Education** - Provider: Exploit Education - URL: https://exploit.education/ - Summary: Downloadable VMs (Phoenix, Nebula and others) for learning memory corruption safely. - Topics: practice, vms, beginner - Level: Beginner - Format: VM challenges - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/exploit-education/ - **picoCTF** - Provider: Carnegie Mellon University - URL: https://picoctf.org/ - Summary: Free CTF platform aimed at students, with many binary and exploitation challenges. - Topics: practice, ctf, beginner - Level: Beginner - Format: CTF platform - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/picoctf/ - **LiveOverflow** - Provider: LiveOverflow - URL: https://liveoverflow.com/ - Summary: Approachable video explanations of binary exploitation, CTF tricks and systems topics. - Topics: videos, writeups, beginner - Level: Beginner - Format: Video + blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/liveoverflow/ ### book - **Heap Exploitation** - Provider: Dhaval Kapil - URL: https://heap-exploitation.dhavalkapil.com/ - Summary: Free book explaining heap allocators and common heap exploitation patterns on Linux. - Topics: heap, book, linux - Level: Advanced - Format: Online book - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/heap-exploitation/ ### browser - **ret2 research blog** - Provider: ret2 systems - URL: https://blog.ret2.io/ - Summary: High-quality writeups on browser, kernel and advanced exploitation research. - Topics: research, writeups, browser, kernel - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ret2io/ ### classic - **Corelan Exploit Writing Tutorial Part 1** - Provider: Corelan Team - URL: https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ - Summary: Classic step-by-step introduction to stack-based buffer overflows on Windows. - Topics: windows, stack, tutorial, classic - Level: Beginner - Format: Tutorial series - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/corelan-part1/ - **Smashing The Stack For Fun And Profit** - Provider: Phrack / Aleph One - URL: https://phrack.org/issues/49/14.html - Summary: The foundational Phrack article that introduced stack-smashing techniques to a wide audience. - Topics: classic, stack, history - Level: Intermediate - Format: Article - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/phrack-smash/ ### course - **pwn.college** - Provider: Arizona State University / pwn.college - URL: https://pwn.college/ - Summary: Structured free dojo covering binary exploitation from first principles with graded modules. - Topics: course, practice, linux, beginner - Level: Beginner - Format: Interactive dojo + videos - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwn-college/ - **Nightmare (guyinatuxedo)** - Provider: guyinatuxedo - URL: https://guyinatuxedo.github.io/ - Summary: Modern binary exploitation course built around pwntools, with many challenge writeups. - Topics: course, writeups, pwntools, linux - Level: Intermediate - Format: Online course + writeups - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/nightmare/ - **Modern Binary Exploitation (MBE)** - Provider: RPISEC - URL: https://github.com/RPISEC/MBE - Summary: RPISEC course materials and labs covering modern binary exploitation techniques. - Topics: course, labs, linux - Level: Intermediate - Format: Course materials (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rpisec-mbe/ ### ctf - **picoCTF** - Provider: Carnegie Mellon University - URL: https://picoctf.org/ - Summary: Free CTF platform aimed at students, with many binary and exploitation challenges. - Topics: practice, ctf, beginner - Level: Beginner - Format: CTF platform - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/picoctf/ ### cwe - **CWE Top 25 Most Dangerous Software Weaknesses** - Provider: MITRE - URL: https://cwe.mitre.org/top25/ - Summary: Annual list of the most dangerous software weaknesses — useful map of exploit classes. - Topics: reference, cwe, vulns - Level: Reference - Format: Annual ranking - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/cwe-top25/ ### debugging - **pwndbg** - Provider: pwndbg project - URL: https://github.com/pwndbg/pwndbg - Summary: GDB plugin that surfaces heap, registers and context useful while developing exploits. - Topics: tools, gdb, debugging - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwndbg/ - **GEF (GDB Enhanced Features)** - Provider: hugsy - URL: https://github.com/hugsy/gef - Summary: Another popular GDB enhancement focused on exploit development workflows. - Topics: tools, gdb, debugging - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/gef/ ### exploit-dev - **FuzzySecurity tutorials** - Provider: FuzzySecurity - URL: https://www.fuzzysecurity.com/tutorials.html - Summary: Windows-focused exploit development tutorials spanning stack, SEH and kernel topics. - Topics: windows, tutorial, exploit-dev - Level: Intermediate - Format: Tutorial index - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/fuzzysecurity/ ### gadgets - **ROPgadget** - Provider: Jonathan Salwan - URL: https://github.com/JonathanSalwan/ROPgadget - Summary: Finds ROP gadgets in binaries across many architectures. - Topics: tools, rop, gadgets - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ropgadget/ ### gdb - **pwndbg** - Provider: pwndbg project - URL: https://github.com/pwndbg/pwndbg - Summary: GDB plugin that surfaces heap, registers and context useful while developing exploits. - Topics: tools, gdb, debugging - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwndbg/ - **GEF (GDB Enhanced Features)** - Provider: hugsy - URL: https://github.com/hugsy/gef - Summary: Another popular GDB enhancement focused on exploit development workflows. - Topics: tools, gdb, debugging - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/gef/ ### glibc - **how2heap** - Provider: shellphish - URL: https://github.com/shellphish/how2heap - Summary: Small C demos of glibc heap techniques, kept updated as allocator internals change. - Topics: heap, glibc, practice, linux - Level: Advanced - Format: Demo suite (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/how2heap/ ### heap - **ir0nstone binary exploitation notes** - Provider: ir0nstone - URL: https://ir0nstone.gitbook.io/notes - Summary: Concise notes on stack, ROP, ret2libc, heap and related Linux exploit primitives. - Topics: notes, rop, heap, linux - Level: Intermediate - Format: GitBook notes - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ir0nstone/ - **how2heap** - Provider: shellphish - URL: https://github.com/shellphish/how2heap - Summary: Small C demos of glibc heap techniques, kept updated as allocator internals change. - Topics: heap, glibc, practice, linux - Level: Advanced - Format: Demo suite (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/how2heap/ - **Heap Exploitation** - Provider: Dhaval Kapil - URL: https://heap-exploitation.dhavalkapil.com/ - Summary: Free book explaining heap allocators and common heap exploitation patterns on Linux. - Topics: heap, book, linux - Level: Advanced - Format: Online book - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/heap-exploitation/ ### history - **Smashing The Stack For Fun And Profit** - Provider: Phrack / Aleph One - URL: https://phrack.org/issues/49/14.html - Summary: The foundational Phrack article that introduced stack-smashing techniques to a wide audience. - Topics: classic, stack, history - Level: Intermediate - Format: Article - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/phrack-smash/ ### kernel - **ret2 research blog** - Provider: ret2 systems - URL: https://blog.ret2.io/ - Summary: High-quality writeups on browser, kernel and advanced exploitation research. - Topics: research, writeups, browser, kernel - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ret2io/ ### labs - **Modern Binary Exploitation (MBE)** - Provider: RPISEC - URL: https://github.com/RPISEC/MBE - Summary: RPISEC course materials and labs covering modern binary exploitation techniques. - Topics: course, labs, linux - Level: Intermediate - Format: Course materials (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rpisec-mbe/ ### linux - **pwn.college** - Provider: Arizona State University / pwn.college - URL: https://pwn.college/ - Summary: Structured free dojo covering binary exploitation from first principles with graded modules. - Topics: course, practice, linux, beginner - Level: Beginner - Format: Interactive dojo + videos - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwn-college/ - **Nightmare (guyinatuxedo)** - Provider: guyinatuxedo - URL: https://guyinatuxedo.github.io/ - Summary: Modern binary exploitation course built around pwntools, with many challenge writeups. - Topics: course, writeups, pwntools, linux - Level: Intermediate - Format: Online course + writeups - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/nightmare/ - **ir0nstone binary exploitation notes** - Provider: ir0nstone - URL: https://ir0nstone.gitbook.io/notes - Summary: Concise notes on stack, ROP, ret2libc, heap and related Linux exploit primitives. - Topics: notes, rop, heap, linux - Level: Intermediate - Format: GitBook notes - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ir0nstone/ - **how2heap** - Provider: shellphish - URL: https://github.com/shellphish/how2heap - Summary: Small C demos of glibc heap techniques, kept updated as allocator internals change. - Topics: heap, glibc, practice, linux - Level: Advanced - Format: Demo suite (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/how2heap/ - **Heap Exploitation** - Provider: Dhaval Kapil - URL: https://heap-exploitation.dhavalkapil.com/ - Summary: Free book explaining heap allocators and common heap exploitation patterns on Linux. - Topics: heap, book, linux - Level: Advanced - Format: Online book - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/heap-exploitation/ - **OverTheWire Wargames** - Provider: OverTheWire - URL: https://overthewire.org/wargames/ - Summary: Long-running free wargames (Bandit, Narnia, Behemoth and more) for stepwise practice. - Topics: practice, wargames, linux - Level: Beginner - Format: Online wargames - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/overthewire/ - **ROP Emporium** - Provider: ROP Emporium - URL: https://ropemporium.com/ - Summary: Focused ROP challenges on Linux and Windows that build gadget chaining skills. - Topics: rop, practice, linux, windows - Level: Intermediate - Format: Challenge set - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rop-emporium/ - **Modern Binary Exploitation (MBE)** - Provider: RPISEC - URL: https://github.com/RPISEC/MBE - Summary: RPISEC course materials and labs covering modern binary exploitation techniques. - Topics: course, labs, linux - Level: Intermediate - Format: Course materials (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rpisec-mbe/ ### notes - **ir0nstone binary exploitation notes** - Provider: ir0nstone - URL: https://ir0nstone.gitbook.io/notes - Summary: Concise notes on stack, ROP, ret2libc, heap and related Linux exploit primitives. - Topics: notes, rop, heap, linux - Level: Intermediate - Format: GitBook notes - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ir0nstone/ - **CTF Wiki** - Provider: CTF Wiki contributors - URL: https://ctf-wiki.org/en/ - Summary: Community-maintained wiki covering pwn, reverse, crypto and other CTF topics. - Topics: wiki, notes, pwn, reverse - Level: Intermediate - Format: Community wiki - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ctf-wiki/ ### practice - **pwn.college** - Provider: Arizona State University / pwn.college - URL: https://pwn.college/ - Summary: Structured free dojo covering binary exploitation from first principles with graded modules. - Topics: course, practice, linux, beginner - Level: Beginner - Format: Interactive dojo + videos - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwn-college/ - **how2heap** - Provider: shellphish - URL: https://github.com/shellphish/how2heap - Summary: Small C demos of glibc heap techniques, kept updated as allocator internals change. - Topics: heap, glibc, practice, linux - Level: Advanced - Format: Demo suite (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/how2heap/ - **Exploit Education** - Provider: Exploit Education - URL: https://exploit.education/ - Summary: Downloadable VMs (Phoenix, Nebula and others) for learning memory corruption safely. - Topics: practice, vms, beginner - Level: Beginner - Format: VM challenges - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/exploit-education/ - **OverTheWire Wargames** - Provider: OverTheWire - URL: https://overthewire.org/wargames/ - Summary: Long-running free wargames (Bandit, Narnia, Behemoth and more) for stepwise practice. - Topics: practice, wargames, linux - Level: Beginner - Format: Online wargames - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/overthewire/ - **picoCTF** - Provider: Carnegie Mellon University - URL: https://picoctf.org/ - Summary: Free CTF platform aimed at students, with many binary and exploitation challenges. - Topics: practice, ctf, beginner - Level: Beginner - Format: CTF platform - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/picoctf/ - **ROP Emporium** - Provider: ROP Emporium - URL: https://ropemporium.com/ - Summary: Focused ROP challenges on Linux and Windows that build gadget chaining skills. - Topics: rop, practice, linux, windows - Level: Intermediate - Format: Challenge set - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rop-emporium/ ### pwn - **CTF Wiki** - Provider: CTF Wiki contributors - URL: https://ctf-wiki.org/en/ - Summary: Community-maintained wiki covering pwn, reverse, crypto and other CTF topics. - Topics: wiki, notes, pwn, reverse - Level: Intermediate - Format: Community wiki - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ctf-wiki/ ### pwntools - **Nightmare (guyinatuxedo)** - Provider: guyinatuxedo - URL: https://guyinatuxedo.github.io/ - Summary: Modern binary exploitation course built around pwntools, with many challenge writeups. - Topics: course, writeups, pwntools, linux - Level: Intermediate - Format: Online course + writeups - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/nightmare/ ### python - **pwntools documentation** - Provider: Gallopsled - URL: https://docs.pwntools.com/en/stable/ - Summary: Docs for pwntools, the standard Python toolkit for writing exploit scripts and CTF solvers. - Topics: tools, python, automation - Level: Intermediate - Format: Library docs - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwntools-docs/ - **pwntools tutorial** - Provider: Gallopsled - URL: https://github.com/Gallopsled/pwntools-tutorial - Summary: Guided tutorials for tubes, ELF helpers, ROP and shellcraft in pwntools. - Topics: tools, tutorial, python - Level: Beginner - Format: Tutorial (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwntools-tutorial/ ### reference - **CWE Top 25 Most Dangerous Software Weaknesses** - Provider: MITRE - URL: https://cwe.mitre.org/top25/ - Summary: Annual list of the most dangerous software weaknesses — useful map of exploit classes. - Topics: reference, cwe, vulns - Level: Reference - Format: Annual ranking - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/cwe-top25/ ### research - **Google Project Zero blog** - Provider: Google Project Zero - URL: https://googleprojectzero.blogspot.com/ - Summary: In-depth vulnerability research writeups from Google's Project Zero team. - Topics: research, writeups, 0day - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/project-zero/ - **ret2 research blog** - Provider: ret2 systems - URL: https://blog.ret2.io/ - Summary: High-quality writeups on browser, kernel and advanced exploitation research. - Topics: research, writeups, browser, kernel - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ret2io/ ### reverse - **CTF Wiki** - Provider: CTF Wiki contributors - URL: https://ctf-wiki.org/en/ - Summary: Community-maintained wiki covering pwn, reverse, crypto and other CTF topics. - Topics: wiki, notes, pwn, reverse - Level: Intermediate - Format: Community wiki - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ctf-wiki/ ### rop - **ir0nstone binary exploitation notes** - Provider: ir0nstone - URL: https://ir0nstone.gitbook.io/notes - Summary: Concise notes on stack, ROP, ret2libc, heap and related Linux exploit primitives. - Topics: notes, rop, heap, linux - Level: Intermediate - Format: GitBook notes - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ir0nstone/ - **ROP Emporium** - Provider: ROP Emporium - URL: https://ropemporium.com/ - Summary: Focused ROP challenges on Linux and Windows that build gadget chaining skills. - Topics: rop, practice, linux, windows - Level: Intermediate - Format: Challenge set - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rop-emporium/ - **ROPgadget** - Provider: Jonathan Salwan - URL: https://github.com/JonathanSalwan/ROPgadget - Summary: Finds ROP gadgets in binaries across many architectures. - Topics: tools, rop, gadgets - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ropgadget/ ### shellcode - **Writing ARM Shellcode** - Provider: Azeria Labs - URL: https://azeria-labs.com/writing-arm-shellcode/ - Summary: Practical guide to writing and debugging ARM shellcode. - Topics: arm, shellcode, tutorial - Level: Intermediate - Format: Tutorial - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/azeria-shellcode/ ### stack - **Corelan Exploit Writing Tutorial Part 1** - Provider: Corelan Team - URL: https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ - Summary: Classic step-by-step introduction to stack-based buffer overflows on Windows. - Topics: windows, stack, tutorial, classic - Level: Beginner - Format: Tutorial series - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/corelan-part1/ - **Smashing The Stack For Fun And Profit** - Provider: Phrack / Aleph One - URL: https://phrack.org/issues/49/14.html - Summary: The foundational Phrack article that introduced stack-smashing techniques to a wide audience. - Topics: classic, stack, history - Level: Intermediate - Format: Article - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/phrack-smash/ ### tools - **pwntools documentation** - Provider: Gallopsled - URL: https://docs.pwntools.com/en/stable/ - Summary: Docs for pwntools, the standard Python toolkit for writing exploit scripts and CTF solvers. - Topics: tools, python, automation - Level: Intermediate - Format: Library docs - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwntools-docs/ - **pwntools tutorial** - Provider: Gallopsled - URL: https://github.com/Gallopsled/pwntools-tutorial - Summary: Guided tutorials for tubes, ELF helpers, ROP and shellcraft in pwntools. - Topics: tools, tutorial, python - Level: Beginner - Format: Tutorial (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwntools-tutorial/ - **ROPgadget** - Provider: Jonathan Salwan - URL: https://github.com/JonathanSalwan/ROPgadget - Summary: Finds ROP gadgets in binaries across many architectures. - Topics: tools, rop, gadgets - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ropgadget/ - **pwndbg** - Provider: pwndbg project - URL: https://github.com/pwndbg/pwndbg - Summary: GDB plugin that surfaces heap, registers and context useful while developing exploits. - Topics: tools, gdb, debugging - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwndbg/ - **GEF (GDB Enhanced Features)** - Provider: hugsy - URL: https://github.com/hugsy/gef - Summary: Another popular GDB enhancement focused on exploit development workflows. - Topics: tools, gdb, debugging - Level: Intermediate - Format: Open-source tool (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/gef/ ### tutorial - **Corelan Exploit Writing Tutorial Part 1** - Provider: Corelan Team - URL: https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ - Summary: Classic step-by-step introduction to stack-based buffer overflows on Windows. - Topics: windows, stack, tutorial, classic - Level: Beginner - Format: Tutorial series - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/corelan-part1/ - **pwntools tutorial** - Provider: Gallopsled - URL: https://github.com/Gallopsled/pwntools-tutorial - Summary: Guided tutorials for tubes, ELF helpers, ROP and shellcraft in pwntools. - Topics: tools, tutorial, python - Level: Beginner - Format: Tutorial (GitHub) - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/pwntools-tutorial/ - **FuzzySecurity tutorials** - Provider: FuzzySecurity - URL: https://www.fuzzysecurity.com/tutorials.html - Summary: Windows-focused exploit development tutorials spanning stack, SEH and kernel topics. - Topics: windows, tutorial, exploit-dev - Level: Intermediate - Format: Tutorial index - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/fuzzysecurity/ - **Writing ARM Shellcode** - Provider: Azeria Labs - URL: https://azeria-labs.com/writing-arm-shellcode/ - Summary: Practical guide to writing and debugging ARM shellcode. - Topics: arm, shellcode, tutorial - Level: Intermediate - Format: Tutorial - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/azeria-shellcode/ ### videos - **LiveOverflow** - Provider: LiveOverflow - URL: https://liveoverflow.com/ - Summary: Approachable video explanations of binary exploitation, CTF tricks and systems topics. - Topics: videos, writeups, beginner - Level: Beginner - Format: Video + blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/liveoverflow/ ### vms - **Exploit Education** - Provider: Exploit Education - URL: https://exploit.education/ - Summary: Downloadable VMs (Phoenix, Nebula and others) for learning memory corruption safely. - Topics: practice, vms, beginner - Level: Beginner - Format: VM challenges - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/exploit-education/ ### vulns - **CWE Top 25 Most Dangerous Software Weaknesses** - Provider: MITRE - URL: https://cwe.mitre.org/top25/ - Summary: Annual list of the most dangerous software weaknesses — useful map of exploit classes. - Topics: reference, cwe, vulns - Level: Reference - Format: Annual ranking - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/cwe-top25/ ### wargames - **OverTheWire Wargames** - Provider: OverTheWire - URL: https://overthewire.org/wargames/ - Summary: Long-running free wargames (Bandit, Narnia, Behemoth and more) for stepwise practice. - Topics: practice, wargames, linux - Level: Beginner - Format: Online wargames - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/overthewire/ ### wiki - **CTF Wiki** - Provider: CTF Wiki contributors - URL: https://ctf-wiki.org/en/ - Summary: Community-maintained wiki covering pwn, reverse, crypto and other CTF topics. - Topics: wiki, notes, pwn, reverse - Level: Intermediate - Format: Community wiki - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ctf-wiki/ ### windows - **Corelan Exploit Writing Tutorial Part 1** - Provider: Corelan Team - URL: https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ - Summary: Classic step-by-step introduction to stack-based buffer overflows on Windows. - Topics: windows, stack, tutorial, classic - Level: Beginner - Format: Tutorial series - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/corelan-part1/ - **ROP Emporium** - Provider: ROP Emporium - URL: https://ropemporium.com/ - Summary: Focused ROP challenges on Linux and Windows that build gadget chaining skills. - Topics: rop, practice, linux, windows - Level: Intermediate - Format: Challenge set - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/rop-emporium/ - **FuzzySecurity tutorials** - Provider: FuzzySecurity - URL: https://www.fuzzysecurity.com/tutorials.html - Summary: Windows-focused exploit development tutorials spanning stack, SEH and kernel topics. - Topics: windows, tutorial, exploit-dev - Level: Intermediate - Format: Tutorial index - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/fuzzysecurity/ ### writeups - **Nightmare (guyinatuxedo)** - Provider: guyinatuxedo - URL: https://guyinatuxedo.github.io/ - Summary: Modern binary exploitation course built around pwntools, with many challenge writeups. - Topics: course, writeups, pwntools, linux - Level: Intermediate - Format: Online course + writeups - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/nightmare/ - **LiveOverflow** - Provider: LiveOverflow - URL: https://liveoverflow.com/ - Summary: Approachable video explanations of binary exploitation, CTF tricks and systems topics. - Topics: videos, writeups, beginner - Level: Beginner - Format: Video + blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/liveoverflow/ - **Google Project Zero blog** - Provider: Google Project Zero - URL: https://googleprojectzero.blogspot.com/ - Summary: In-depth vulnerability research writeups from Google's Project Zero team. - Topics: research, writeups, 0day - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/project-zero/ - **ret2 research blog** - Provider: ret2 systems - URL: https://blog.ret2.io/ - Summary: High-quality writeups on browser, kernel and advanced exploitation research. - Topics: research, writeups, browser, kernel - Level: Advanced - Format: Research blog - License: Free to access. Copyright held by the provider; this directory only links to it and reproduces no content. - Page: https://exploit.lowlevellibrary.com/entries/ret2io/ ## About Exploit Library Source page: https://exploit.lowlevellibrary.com/about/ Exploit Library is a free directory of 24 free resources from 23 providers on exploit development and binary exploitation. Sister of Low Level Library. Curated by The Low Level Librarian. Contact: hello@lowlevellibrary.com. ### Method Hand-curated from official pages and public repositories. Summaries written in our own words. Every URL checked live on 2026-10-14. No ToS-breaking scraping. ### Sister sites - BinRev Library: https://binrev.lowlevellibrary.com/ - Firmware Library: https://firmware.lowlevellibrary.com/ - Low Level Library: https://lowlevellibrary.com/